DomainGuard by NHM Ohio

One place to see what can break your domain, email, or website.

DomainGuard monitors DNS, SSL certificates, email authentication, uptime, vulnerabilities, compliance, and website health. It shows what needs attention, why it matters, and where to act next.

Start freeRun a free domain checkup
  • No credit card
  • Unlimited domains free
  • Manual security scans included
  • Web and iOS

Example overview

example.com

2 actions

Domain

Healthy

Email

Review

Website

Healthy

DMARC policy is still monitoring

Review sender pass rates before moving toward enforcement.

Certificate expires in 21 days

Confirm automatic renewal before the next scheduled scan.

Last scan: today
Uptime: online

29

features compared across plans

Free

on unlimited domains

3

watched automatically

1

account for web and iOS

Why it matters

Domains rarely fail in one obvious place.

Your website, DNS, certificates, and business email depend on different records and providers. DomainGuard keeps those signals together so a small change does not stay invisible until a customer reports it.

Certificates

An SSL certificate can expire before anyone remembers it.

DomainGuard tracks certificate health and expiry so the warning appears before customers see a browser error.

Business email

One new sending service can break email authentication.

SPF, DKIM, DMARC, blacklist checks, and DMARC reports show which services pass and where mail reputation needs attention.

DNS and uptime

A small DNS change can take a site or inbox offline.

Change history, scheduled scans, uptime checks, and activity records give you a place to see what changed and when.

Website risk

Exposed software and weak browser controls are easy to miss.

Vulnerability, technology, header, and website scans turn public-facing risk into a list your team can work through.

Who DomainGuard is for

Built for the person who will actually get the alert.

Business owners who manage their own technology

You need to know if the company website, certificates, DNS, and business email are healthy without learning five separate security tools.

Small internal IT teams

You need one prioritized view across domains, useful history when something changes, and evidence you can share with leadership.

Agencies and service providers

You manage several customer or brand domains and need repeatable checks instead of opening a different dashboard for every signal.

Teams preparing for audits or insurance

You need a current record of certificates, email authentication, vulnerabilities, and remediation work instead of rebuilding the evidence later.

What it monitors

The checks that usually live in separate tools.

Every finding stays tied to the domain it came from. That makes it easier to move from a portfolio view to the record or scan that needs work.

Domain, DNS, and certificate health

Keep the basic infrastructure behind your website and email visible.

  • Domain portfolio and registrar details
  • SSL certificate status and expiry
  • DNS and nameserver checks
  • DNS change history and activity feed

Email security and DMARC

See whether legitimate business email authenticates and who else is sending.

  • SPF, DKIM, DMARC, and MX checks
  • Automatic DMARC report intake
  • Known and unknown sender identification
  • Blacklist checks and deliverability diagnostics

Website security and vulnerabilities

Find public-facing weaknesses before they become a surprise during an incident or review.

  • Known vulnerability and exposed-service scans
  • Website transport, cookie, and form checks
  • HTTP security header analysis
  • Technology and framework detection

Uptime and service status

Separate a problem with your site from an outage at a provider you depend on.

  • Website uptime and availability history
  • Third-party provider status monitoring
  • Incident and activity records

Compliance and clear reporting

Keep technical findings and remediation evidence organized for the people who need it.

  • PCI, HIPAA, and cyber-insurance tracking
  • Prioritized security checkup
  • PDF reports for stakeholders
  • SEO and accessibility scanning

Alerts, automation, and scale

Move beyond manual checks as the number of domains and people involved grows.

  • Nightly re-scans that raise change, renewal and certificate alerts
  • An Alerts page on the web and push to the iPhone app
  • Read-only API and MCP access on Pro
  • Hourly scans and write access on Enterprise

How it goes after you sign up

A useful baseline, a current history, and a next action.

Baseline

Add a domain and see where it stands

We check the records and public signals we can observe, then put the highest-priority findings in one overview. Most of it works from public information, so there is nothing to install.

Monitor

Keep the picture current

Scheduled scans, change history, DMARC reports, uptime probes every five minutes and provider status give you a record of what moved after that first scan.

Act

Work from a specific next step

Open the module behind an alert to see the record and the recommendation. Export the evidence, or ask us to look at it with you.

Plans and pricing

Four plans. No setup fee, no contract.

Every plan holds every domain you own. What you are buying is how many of them we watch without being asked, whether you get DMARC reports and SEO, and whether we tell you before you go looking.

Free

Every health check on every domain you own, whenever you run it

Free

No credit card. Nothing expires.

Add as many domains as you own

3 checked for downtime every 5 minutes. Everything else runs when you press scan.

Includes

  • Domain Monitoring
  • SSL Certificate Monitoring
  • Email Security Score
  • Security Checkup
  • Vulnerability Scanner
  • Site Check
Start free

Starter

DMARC reports, SEO and accessibility, Lookalike Watch, and 25 domains re-checked for you every day

$6.99/mo

Billed monthly. Cancel any time.

Add as many domains as you own

25 fully re-checked for you every day, plus a downtime check every 5 minutes.

Everything in Free, plus

  • DMARC Reports
  • SEO & Accessibility Scans
  • Automatic Monitoring
  • Lookalike Watch
  • PDF Reports
Get the iPhone appStarter is bought in the DomainGuard iPhone app. Use the same email there as here and the dashboard unlocks as soon as Apple confirms it.
Best value

Pro

The local SEO suite, daily SEO scans and reports, read-only API and MCP access, and 100 domains re-checked for you every day

$49.99/mo

Billed monthly. Cancel any time.

Add as many domains as you own

100 fully re-checked for you every day, plus a downtime check every 5 minutes.

Everything in Starter, plus

  • Local SEO
  • Daily SEO Scans and Reports
  • API and MCP Access
Get the iPhone appPro is bought in the DomainGuard iPhone app. Use the same email there as here and the dashboard unlocks as soon as Apple confirms it.

Enterprise

Every domain in the account re-checked for you, hourly if you switch it on, and an API and MCP server that can make changes

$99.99/mo

Billed monthly. Cancel any time.

Add as many domains as you own

All of them fully re-checked for you every day, or every hour if you turn it on, plus a downtime check every 5 minutes.

Everything in Pro, plus

  • Hourly Scans
  • Priority Scanning
  • API Writes
Get the iPhone appEnterprise is bought in the DomainGuard iPhone app. Use the same email there as here and the dashboard unlocks as soon as Apple confirms it.

Prices in USD. Paid plans are bought in the DomainGuard iPhone app through Apple, which works out any sales tax and sends the receipt. Cancel any time in your iPhone's Settings, under Subscriptions.

Everything, side by side

Generated from the same list our servers check against, so it cannot promise you something the account will not grant.

Every feature and limit, plan by plan36 rows: what each plan includes, then the limits that separate them.

Domains, DNS and certificates

  • Domain Overview

    One dashboard for risk, health trends, and highest-priority next actions

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Domain Monitoring

    Track DNS posture, registrar details, and lifecycle changes across your domains

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • SSL Certificate Monitoring

    Catch expiring or broken certificates before they impact trust and uptime

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Email Security Score

    Measure SPF, DKIM, and DMARC readiness with clear fixes to improve deliverability

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Blacklist Checking

    Detect DNSBL listings early so email reputation issues do not become incidents

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Uptime Monitoring

    See outages and performance degradation quickly with historical availability tracking

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Activity Feed

    Timeline of meaningful security events so teams can review changes and escalation paths

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

Security scanning

  • Security Checkup

    Action-oriented security baseline showing what to fix first and why it matters

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Vulnerability Scanner

    Identify exposed services, outdated software, and known CVE risk quickly

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • HTTP Header Analysis

    Validate browser security headers and hardening gaps that affect web risk

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Website Security Scan

    Review transport, cookie, and form-security weaknesses across your site

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Site Check

    Load your pages in a real browser as a phone on 4G and get speed, mobile, SEO, security and accessibility findings, each with its cause and fix; weekly on Starter, daily on Pro and up

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Tech Stack Detection

    Understand exposed technologies and framework footprint to guide patch priorities

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Dark Web Monitoring (iOS app)

    Check an email address against known breach dumps and see exactly what was exposed, in the DomainGuard app

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

Email authentication and compliance

  • DMARC Reports

    Receive DMARC aggregate reports at an address we host, map the senders, and see who is sending as you

    Not in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Compliance Tracker

    Turn PCI, HIPAA, and CMMC control requirements into trackable remediation tasks

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • PDF Reports

    Generate executive-ready reports for audits, stakeholders, and client deliverables

    Not in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

SEO and accessibility

  • SEO & Accessibility Scans

    Score a page or a whole site, with axe accessibility findings and AI fix guidance

    Not in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Deep SEO Scan

    Audit sitemap pages at scale and produce richer AI fix guidance across pages

    Not in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Whole-Site SEO Audit

    Crawl your site from its sitemap and get a page-by-page list of missing titles, meta descriptions, H1s and image alt text, plus pages that error or are marked noindex

    Not in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Local SEO

    Local ranking checks and business profile tracking for your service areas

    Not in FreeNot in StarterIncluded in ProIncluded in Enterprise

  • Daily SEO Scans and Reports

    Automatic daily SEO scans with saved results and an emailed report, instead of rerunning each one by hand

    Not in FreeNot in StarterIncluded in ProIncluded in Enterprise

Automation and scale

  • Automatic Monitoring

    Re-check your domains every night instead of pressing scan, keep the history, and get an alert when a record changes or a renewal or certificate is running out

    Not in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Lookalike Watch

    Keep watching for domains registered to impersonate yours, and get told when one can receive mail or starts to look like your site

    Not in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • Scheduled Dark Web Scans (iOS app)

    Re-check your monitored addresses daily or weekly and push an alert to the DomainGuard app when a new breach lists one

    Included in FreeIncluded in StarterIncluded in ProIncluded in Enterprise

  • API and MCP Access

    Read your scan data over the REST API, or connect Claude to your account with our MCP server

    Not in FreeNot in StarterIncluded in ProIncluded in Enterprise

  • API Writes

    Let the API and MCP add domains, start scans, and update compliance records, not just read them

    Not in FreeNot in StarterNot in ProIncluded in Enterprise

  • Hourly Scans

    Switch scanning from daily to every hour, in Settings, for assets that change often

    Not in FreeNot in StarterNot in ProIncluded in Enterprise

  • Priority Scanning

    Your domains go first in each scheduled sweep

    Not in FreeNot in StarterNot in ProIncluded in Enterprise

Limits on each plan

  • Domains in your account

    Add every domain you own, on any plan, and check any of them whenever you like. Free accounts can add up to 250 in any 30 days, which stops automated sign-ups, not you

    Free: No limitStarter: No limitPro: No limitEnterprise: No limit

  • Checked for you automatically

    Domains we keep checking without you pressing scan. On Free that is the uptime probe, a downtime check every five minutes. Paid plans add the scheduled re-scan of DNS, certificates, email records and the rest. If you have more domains than this, your oldest ones are the ones watched

    Free: 3Starter: 25Pro: 100Enterprise: All

  • Full re-check

    How often a watched domain gets the full re-check, with alerts when something changed or is about to expire

    Free: When you press scanStarter: DailyPro: DailyEnterprise: Daily or hourly

  • Monitored addresses (dark web)

    Email addresses watched for breach exposure in the DomainGuard iOS app

    Free: 1Starter: 5Pro: 10Enterprise: 50

  • Pages per full-site SEO crawl

    Pages a deep SEO scan covers, taken in sitemap order. The web dashboard's Crawl every page site audit stops at 300 pages

    Free: —Starter: 25Pro: 5,000Enterprise: 5,000

  • Local SEO credits

    Credits for map scans, citation audits and competitor gap reports. Local SEO itself starts at Pro, and the plan allowance is the only source of credits. There are no packs to buy. Free accounts get a one-time 100 to use during a Pro trial or after upgrading

    Free: 100 one timeStarter: —Pro: 250 a monthEnterprise: 1,900 a month

  • Ads

    The free plan carries ads. Paying anything removes them

    Free: Ad supportedStarter: NonePro: NoneEnterprise: None

Dark web monitoring runs in the DomainGuard iOS app, not the web dashboard. Automatic SEO scans run daily on Pro and Enterprise, with an emailed report, and weekly on Starter. Accessibility results are evidence for a review and never establish WCAG conformance on their own.

Create a free accountPricing questions and billing details

Before you pay

The things people ask before they pay.

Cancel any time, keep what you paid for

Cancel in your iPhone's subscription settings and the plan runs to the end of the period you already paid for. We do not take away something you have paid for. Refunds are requested from Apple at reportaproblem.apple.com, because Apple is the merchant of record.

Add as many domains as you own, on any plan

There are two numbers to know. The first is how many domains you can add, and on every plan, Free included, there is no limit. The second is how many we check for you without being asked: three on Free, 25 on Starter, 100 on Pro and every one of them on Enterprise. On Free that means a downtime check every five minutes. Paid plans also get a full re-check of DNS, certificates, email records and the rest every day. Free accounts can add up to 250 domains in any 30 days, which stops automated sign-ups, not you.

Domains over the watched number still work

Your oldest domains are the ones we watch. The rest stay in your dashboard, you can scan any of them whenever you like, and every check reports what it would on any other domain. The only difference is that we don't re-check them on our own, so no alert goes out about them. Nothing is ever deleted.

Deep scans run on domains you verify

Basic checks run on any domain. Deep scans, which test open ports and known vulnerabilities, run on domains you have verified you own: a DNS record, a file on the site or an email link, about a minute, and a sign-in address at your own domain already counts. Look after sites you can't verify? Ask us to approve your account. It is the reason we can keep running these scans at all.

We do not change your DNS or your website

DomainGuard reads, records and recommends. Enterprise API write access performs the account actions the API exposes, and nothing outside it.

Go deeper

One page per check, and one per kind of team.

What DomainGuard watches

DomainGuard for your kind of work

Before you add a domain

Common DomainGuard questions.

Who is DomainGuard for?

DomainGuard is built for small businesses, lean IT teams, agencies, and service providers that manage business domains without a large security operations team. It is most useful when website, email, DNS, and compliance checks are currently spread across separate tools or handled only when something breaks.

What can I do on the free plan?

Free holds every domain you own and includes every core security module on all of them, run whenever you like: DNS, SSL, email authentication, uptime, blacklists, the security checkup, the website scan, the vulnerability scanner and a manual dark-web check. Three domains are watched automatically. You do not need a credit card. What it does not include is DMARC report ingestion and SEO — those start on Starter at $6.99 a month, along with monitoring that runs without being asked.

Is DomainGuard a web dashboard or an iPhone app?

It is both. The web dashboard holds everything except dark web monitoring, which is a tab in the app. The iOS companion app uses the same account and focuses on quick domain checks, alerts, status, breach monitoring, and support while you are away from a desk.

Does DomainGuard make changes to my DNS or website?

No. DomainGuard scans, monitors, records, and recommends. Changes remain under your control. Enterprise API write access can perform the specific account actions exposed by the API, but it does not silently edit outside DNS providers or websites.

What do I need to get started?

Create an account and add a domain name. Most checks work from public information and run on any domain. Deep scans (open ports, known vulnerabilities) need the domain verified first: a sign-in address at it counts, or a DNS record, a file, or an email link, which takes about a minute. Features such as DMARC reporting need you to publish the reporting address DomainGuard provides, and some integrations need their own setup.

Can NHM Ohio help fix the findings?

Yes. DomainGuard shows the evidence and next action so you can handle the work internally. If you want help, NHM Ohio can review DNS, email authentication, website security, or the wider IT environment with you.

Add the first domain today

Get the baseline before the next certificate, DNS, or email change.

The free plan covers every domain you own. Run the checks yourself, keep the history in one place, and bring NHM in only when you want help with a finding.

Start freeAsk NHM about DomainGuard